Cybersecurity Lead

ReOrbit is looking for a Cybersecurity Lead to take ownership of our enterprise cybersecurity posture and cyber-defence capabilities, turning security objectives and risk decisions into working technical controls, measurable operational capabilities and sustained improvements. You will lead the cybersecurity team and work closely with IT, engineering, mission and product security, project delivery, legal, and business leadership to strengthen ReOrbit’s security capabilities as we scale. As our new Cybersecurity Lead, you understand the technology, make risk-based decisions, lead implementation and ensure agreed security improvements are delivered. It's an exciting chance to join a dynamic start-up, with the opportunity to make a real impact, to reach our goal of pushing the boundaries of space data transfer. Responsibilities Maintain an evidence-based view of ReOrbit’s enterprise cybersecurity posture, material risks, control gaps, and improvement priorities. Own and execute the enterprise cybersecurity roadmap in alignment with company strategy, customer requirements, and the information-security management system. Translate threat intelligence, risk assessments, incidents, vulnerabilities, and audit findings into prioritised security improvements. Define meaningful cybersecurity metrics and provide concise reporting to security and company leadership. Own cyber-defence capabilities across identity, endpoints, networks, cloud platforms, and on-premises environments. Manage external SOC and security-service providers. Lead or coordinate the technical response to significant cybersecurity incidents. Own vulnerability and exposure management, including prioritisation, remediation, verification, and escalation. Coordinate penetration tests and technical security assessments. Improve privileged access, strong authentication, conditional access, identity lifecycle management, and device trust. Establish security baselines for endpoints, mobile devices, cloud services, networks, and administrative environments. Provide cybersecurity input to customer assurance activities, security questionnaires, architecture reviews, and technical discussions. Ensure customer security commitments are translated into implementable controls, responsible owners, evidence requirements, and operating procedures. Work closely with the Mission & Product Security Owner to maintain a clear boundary and effective coordination between enterprise cybersecurity and product or mission security. Lead, coach, and prioritise the work of the cybersecurity team. Drive security improvements through influence, clear requirements, practical support, and appropriate escalation. Help develop the cybersecurity budget, capability plan, technology roadmap, and external-service requirements. Promote a culture in which cybersecurity issues are identified early, discussed openly, and resolved based on business and mission risk. Skills and Requirements Strong hands-on experience securing cloud, identity, endpoint, network, and on-premises environments. Demonstrated experience owning cybersecurity programmes, security operations capabilities, or major security improvement roadmaps. Experience leading cybersecurity incidents and developing incident-response capabilities. Strong background in vulnerability management, technical risk assessment, and remediation governance. Experience managing and collaborating with external SOC and security-service providers. Experience leading technical specialists, projects, or a cybersecurity team. Deep understanding of advanced threats, attack paths, cyber-risk management, and defence-in-depth. Strong knowledge of identity security, endpoint security, cloud security, network segmentation, and data protection. Hands-on familiarity with XDR or EDR, SASE, DLP, SIEM or security analytics, vulnerability management, and security automation. Experience with threat intelligence, threat hunting, incident investigation, and digital forensics. Solid knowledge of ISO/IEC 27001, NIST Cybersecurity Framework, and recognised hardening practices. Experience with Google Workspace, Google Cloud Platform, Microsoft Entra ID, and Microsoft Intune. Experience in space, defence, aerospace, telecommunications, critical infrastructure, or another high-assurance sector is a plus. Experience supporting sovereign, governmental, regulated, or security-sensitive customers is a plus. Experience with Palo Alto Networks technologies is a plus. Experience with supply-chain security or supplier assurance is a plus. Relevant certifications such as CISSP, CISM, CCSP, GIAC, or equivalent experience are a plus. Strong communication and stakeholder management skills, with the ability to work effectively across technical, security, engineering, and business teams. What does ReOrbit do? ReOrbit builds the foundation for the next generation of space applications by transforming satellites into truly intelligent, interconnected platforms, defined by software. Our satellite design philosophy revolves around the idea that satellites must network, communicate with each other and thus improve mission efficiency. How can this be achieved? Thanks to a flexible software-first architecture, where all these aspects are dealt with upfront in the mission concept, as integrated functionalities. ReOrbit’s top-notch team of software engineers and system architects develop in-house software, procure hardware from the best-in-class suppliers, and seamlessly integrate the components to create flexible and secure satellites. Today, we are a rapidly growing company building a very strong multidisciplinary team to support our activities. We are headquartered in Helsinki, Finland with a subsidiaries in Bristol, UK, Bariloche, Argentina and Bengaluru, India. Working at ReOrbit At ReOrbit, we are focused on building a strong team as we believe nothing can be accomplished without innovative, humble and curious minds working together on a common goal. We’re all about fostering an inclusive, dynamic environment where equality and diversity are our strength. We offer Challenging but rewarding environment – you will thrive if you are always reflecting on how to make things better. Your ideas will be heard. Ambitious and supportive network of people, who are motivated to change the space industry, bringing expertise from both classic and new space. Benefits such as lunch vouchers, events, parties, occupational health care and additional health insurance - but most importantly a possibility to be a part of a unique and diverse team, connected by similar mindset and sense of humor. We like to spend time together! You can choose activities whichever is to your liking – runOrbit, climbOrbit; become ping pong or board games champion. We support relocation and integration into Finnish society. Join us in our journey of building software enabled satellites for secure communications and, thus, creating the most compelling in space data flow company of the new space era. The Company may require a security clearance for certain positions. Any such security clearance will be conducted in accordance with applicable law and the Company's relevant policies For agencies: We do not accept unsolicited CVs for our open vacancies. Any CV sent to our team unsolicited will reserve us the right to pursue a candidate without obligation to the sender. All candidate submissions must be conducted through our official channels and in accordance with our terms of engagement.